CVE-2012-1063 in Applications Manager

Summary

Multiple SQL injection vulnerabilities in ManageEngine Applications Manager 9.x and 10.x allow remote attackers to execute arbitrary SQL commands via the (1) viewId parameter to fault/AlarmView.do or (2) period parameter to showHistoryData.do.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 02/13/2012
• Disclosure: 02/13/2012
• Moderation: VulDB entry created
• Entries: VDB-60173 (1)
• CPE: ready
• CWE: CWE-89 (Confirmed)
• CVSS: 7.3
• EPSS: 0.00526
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-1063
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-1063
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-1063/